This section applies if, at any time after an importer of a relevant connectable product makes it available to a customer in the United Kingdom—
the importer becomes aware, or ought to be aware, of a compliance failure in relation to the product, and
the importer is aware, or ought to be aware, that the product is a UK consumer connectable product.
The importer must, as soon as is practicable, take all reasonable steps to remedy the compliance failure.
The importer must notify the persons listed in subsection (4) of the compliance failure as soon as possible.
The persons referred to in subsection (3) are—
the enforcement authority, and
in a case where specified conditions are met, any customer in the United Kingdom to whom the importer supplied the product.
The notification under subsection (3) must include the following information—
details of the compliance failure;
any risks of which the importer is aware that are posed by the compliance failure;
any steps that have been taken by the importer to remedy the compliance failure and whether or not those steps have been successful.
In this section "compliance failure" means a failure by the importer to comply with a relevant security requirement relating to the product.